36d78f255268d887f842d9c96fc06ffec469c7bbc6a49b09da8eb7e696497b19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

36d78f255268d887f842d9c96fc06ffec469c7bbc6a49b09da8eb7e696497b19
Size

378KB
MD5

255600e0cdde744ec7dbe5789b899a1e
SHA1

ff5c85c46603b6a53219c9a3730a9843db5eb67f
SHA256

36d78f255268d887f842d9c96fc06ffec469c7bbc6a49b09da8eb7e696497b19
SHA512

8e1fb6cdb072d87b4be01db404f5acb234e806efd1cad3676240250bb5f88ecc32f429aa809a442f377768cf4c962133fafe128be0a967c192a1a727a4b55c76
SSDEEP

6144:SiyrlK2EmkseqwA1Lxl6dONR8NQLkNNL66hUMK/W3dDUyhU2rV:ryrlK0np1l/g+LkNJDhUp/WtIVA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
36d78f255268d887f842d9c96fc06ffec469c7bbc6a49b09da8eb7e696497b19

Files

36d78f255268d887f842d9c96fc06ffec469c7bbc6a49b09da8eb7e696497b19
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 375KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ